runaway process

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi.

I have a process that at times is eating up 90 to 100% of my clock cycles.
It is spelled windosupdate.exe. Notice the misspelling of windows. I was
told by a Norton tech that this is a legitamate windows process. So I have
three questions:

1. Can anybody confirm that this is truly a legitamate windows process?

2. If it is a legitamate process; it shouldn't be eating up so many clock
cycles that my computer is hanging should it? Actually, I think this is
causing me to be knocked off line also.

3. Could it be a corrupted windows process?
 
If you're not sure whether a file is malicious, you can upload it to web
sites such as VirusTotal (http://www.virustotal.com) which will
determine the nature of the file.

Another way is to search the web using the name of the file. You'll
either get plenty of hits explaining the file, or almost no hits, which
usually means the file is malicious.
 
Hi.

I have a process that at times is eating up 90 to 100% of my clock cycles.
It is spelled windosupdate.exe. Notice the misspelling of windows. I was
told by a Norton tech that this is a legitamate windows process. So I have
three questions:

1. Can anybody confirm that this is truly a legitamate windows process?

2. If it is a legitamate process; it shouldn't be eating up so many clock
cycles that my computer is hanging should it? Actually, I think this is
causing me to be knocked off line also.

3. Could it be a corrupted windows process?

That's not a wndows file and Norton probably thought you spelled it
wrong.

Here's a little info, but there isn't a lot on it. I think this guy
caught it with a ZoneAlarm spyware scan.

BTW, one of the viruses I received shows up in Windows Task Manager as
‘WindosUpdate’ (note the spelling error), and consumes all the CPU.
Regedit showed me several entries with that name, and I deleted all of
those. I also found it cleverly hidden in a directory that was
completely invisible, even when ’show hidden files’ was selected:
C:\Program Files\Common Files\System\windosupdate.exe. I deleted that
too.

http://www.mslinn.com/blog/
 
joesf16 said:
Hi.

I have a process that at times is eating up 90 to 100% of my clock cycles.
It is spelled windosupdate.exe. Notice the misspelling of windows. I was
told by a Norton tech that this is a legitamate windows process. So I have
three questions:

1. Can anybody confirm that this is truly a legitamate windows process?

2. If it is a legitamate process; it shouldn't be eating up so many clock
cycles that my computer is hanging should it? Actually, I think this is
causing me to be knocked off line also.

3. Could it be a corrupted windows process?

Try to Rename this to something like:

windosupdate.exe.Old
you will find it here:
C:\Program Files\System\windosupdate.exe
Run an online scanner from other vendor and including your Anti-virus online
scanner.
As Earl mentioned, try to send it to Virustotal.com and see what will show.
My Guess it is a nasty remote service and execute to redirect your browser
to some links when it sense the internet connection, also it may be assigned
itself an admin privileges.
HTH.
nass
 
Back
Top